Extracted

• • Target

    Shipping doc_pdf.exe

  • Size

    1.1MB

  • MD5

    7a59f7d0673ef800595eca1f5938e581

  • SHA1

    570288fba8fd233aa59ca2e760a0af6c055ad8da

  • SHA256

    557c3a0a4676f650fdd41360c3e9161268c7041359e6139e3e7837d2ae1bad0a

  • SHA512

    f58800a8277dc050b3e3402f438415e607b923b8a1416b6df3a9c815f7506c6a9902f1c97aaf6180f003eb0e2fb710ccb1fb184af8ac97914bd67ad6a811b5a5

  • SSDEEP

    24576:nqDEvCTbMWu7rQYlBQcBiT6rprG8aRqBYQhS9tBfdeHwCjk:nTvC/MTQYxsWR7aRqBHs9tBfdows

  Score

  10^/10

  formbookph01discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2